Firecrawl Alexandria

Red Hat Security Data API

Red Hat Product Security's CVE and errata data from the Red Hat Security Data API (access.redhat.com/hydra/rest/securitydata): look up a CVE as Red Hat tracks it, search Red Hat CVEs by package, product, severity, CWE, CVSS v3 score, erratum, Bugzilla id or public date, and look up an RHSA/RHBA/RHEA erratum with its CVEs, product streams and fixed packages (CSAF 2.0). Red Hat's vendor view, which neither NVD nor OSV carries: Red Hat's own threat severity and CVSS score (often lower or higher than NVD's), per-product fix state across RHEL, OpenShift and other Red Hat products (Affected, Not affected, Will not fix, Fix deferred), the RHSA errata that fix each product, and Red Hat's statement and mitigation. Every result carries Red Hat's CC BY 4.0 attribution.

Try in Agent

Is RHEL affected by CVE-2021-44228, and which Red Hat errata fix it in OpenShift Logging?

Try Red Hat Security Data API now.

Choose an example or ask your own question.

What do you want to do with Red Hat Security Data API?

Red Hat Security Data API

TRY ASKING

Codefollows the fields above

const result = await firecrawl.scrape({
  alexandria: {
    provider: "access-redhat-com",
    capability: "vulnerabilities/advisory",
    options: {
      advisory_id: "RHSA-2021:5137",
    },
  },
});

2Response example

This is a sample shape. Press Run to see live data from Red Hat Security Data API.

{
  "advisory": {
    "advisory_id": "RHSA-2021:5137",
    "bugzilla_ids": [
      "2030932",
      "2032580"
    ],
    "current_release_date": "2026-10-12T14:10:00+00:00",
    "cve_count": 2,
    "cves": [
      {
        "bugzilla_ids": [
          "2030932"
        ],
        "cve_id": "CVE-2021-44228",
        "cvss3_score": 9.8,
        "cvss3_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "cwe_id": "CWE-20",
        "cwe_name": "Improper Input Validation",
        "discovery_date": "2021-12-10T00:00:00+00:00",
        "release_date": "2021-12-10T02:01:00+00:00",
        "threat_severity": "Moderate",
        "title": "log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value"
      },
      {
        "bugzilla_ids": [
          "2032580"
        ],
        "cve_id": "CVE-2021-45046",
        "cvss3_score": 8.1,
        "cvss3_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "cwe_id": "CWE-917",
        "cwe_name": "Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')",
        "discovery_date": "2021-12-14T00:00:00+00:00",
        "release_date": "2021-12-14T00:00:00+00:00",
        "threat_severity": "Moderate",
        "title": "log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228)"
      }
    ],
    "details": "Openshift Logging Bug Fix Release (5.0.10)\n\nSecurity Fix(es):\n\n* log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value (CVE-2021-44228)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
    "errata_url": "https://access.redhat.com/errata/RHSA-2021:5137",
    "fixed_package_count": 3,
    "fixed_packages": [
      {
        "package": "openshift-logging/elasticsearch6-rhel8@sha256:8612f54b6b077febf9ab833b6bf6fe4673bc29ed8765323e60c4b7531ef40407_s390x",
        "product": "OpenShift Logging 5.0",
        "purl": "pkg:oci/elasticsearch6-rhel8@sha256:8612f54b6b077febf9ab833b6bf6fe4673bc29ed8765323e60c4b7531ef40407?arch=s390x&repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8&tag=v5.0.10-1"
      },
      {
        "package": "openshift-logging/elasticsearch6-rhel8@sha256:a70f88abff582e94a56f650acb782217e6247dc13343d7803492467a4881a9b0_ppc64le",
        "product": "OpenShift Logging 5.0",
        "purl": "pkg:oci/elasticsearch6-rhel8@sha256:a70f88abff582e94a56f650acb782217e6247dc13343d7803492467a4881a9b0?arch=ppc64le&repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8&tag=v5.0.10-1"
      },
      {
        "package": "openshift-logging/elasticsearch6-rhel8@sha256:c4fb65aaf2602f06b713da8e5b5674d880f57177510a533135cbb93c7e362eb9_amd64",
        "product": "OpenShift Logging 5.0",
        "purl": "pkg:oci/elasticsearch6-rhel8@sha256:c4fb65aaf2602f06b713da8e5b5674d880f57177510a533135cbb93c7e362eb9?arch=amd64&repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8&tag=v5.0.10-1"
      }
    ],
    "initial_release_date": "2021-12-14T21:36:36+00:00",
    "products": [
      {
        "cpe": "cpe:/a:redhat:logging:5.0::el8",
        "name": "OpenShift Logging 5.0",
        "product_id": "8Base-OSE-LOGGING-5.0"
      }
    ],
    "severity": "Moderate",
    "title": "Red Hat Security Advisory: Openshift Logging Security Release (5.0.10)",
    "topic": "Openshift Logging Security Release (5.0.10)\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
    "type": "security"
  },
  "detail": "full",
  "notice": "Contains Red Hat Security Data (https://access.redhat.com/security/data), copyright Red Hat, Inc., licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Restructured by Firecrawl.",
  "observed_at_ms": 1792789796989,
  "source_url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2021:5137.json"
}

Red Hat Security Data API

Try Red Hat Security Data API now.

Related providers